Install
Start
Static task
static1
Behavioral task
behavioral1
Sample
e9cfba608c08dc2a0b965d9823e0179db547d88d439ad609edbb84e499c457ae.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9cfba608c08dc2a0b965d9823e0179db547d88d439ad609edbb84e499c457ae.dll
Resource
win10v2004-20220812-en
Target
e9cfba608c08dc2a0b965d9823e0179db547d88d439ad609edbb84e499c457ae
Size
33KB
MD5
d94c93f3d142d8c5927ac1c6e5e89aa1
SHA1
09d486dc3871f961e488a2460f6312c7c46f2572
SHA256
e9cfba608c08dc2a0b965d9823e0179db547d88d439ad609edbb84e499c457ae
SHA512
3ca65deb628dfa60056f5184cf4a5df1aa49896dfddf8419c460374576360d8f6a62dc74a375915f1349286ce7bc603fcf46f7daa33b22e826247ed8d8dadb24
SSDEEP
768:KhgecrIHVGNXGbxNBlhmu9HnQ1y8IqRrxq6XJ5g:ccr+O2bxt4OIy8IqRtq655g
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Install
Start
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE